This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
File:                     oUygeMheRlNdkgQ4K4SXTxOwyTw.mft (raw, json)
Hash identifier:          WQxGXse3jYoOWxNji4yzYdYmms6/mvqOrys+QiODhS8=
Subject key identifier:   1B:7E:5B:00:63:EF:BB:45:15:99:23:B0:B8:94:16:D9:A8:8B:D3:2B
Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
Certificate issuer:       /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Certificate serial:       0558
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
Manifest number:          054B
Signing time:             Mon 22 Dec 2025 22:34:05 +0000
Manifest this update:     Mon 22 Dec 2025 22:34:05 +0000
Manifest next update:     Mon 29 Dec 2025 22:34:05 +0000
Files and hashes:         1: oUygeMheRlNdkgQ4K4SXTxOwyTw.crl (hash: HICzDhwD7awBuBB+n1H+C0hhOPiHOigYX+a44G7DEek=)
                          2: B9D90E00606311EE8844F941C4F9AE02.roa (hash: aAr/AU8IFNUmMq34qwhN3m6rQAbT8ihXICsQVftRUXU=)
                          3: B90B58FCD97211ED8C2F1263C4F9AE02.roa (hash: 8ZU922WlfqbDCFA7+sGqs+X/ZJnzDKijBbgzR74c6fQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl
                          rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 22:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368 (0x558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E83FE, serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
        Validity
            Not Before: Dec 22 22:34:05 2025 GMT
            Not After : Dec 29 22:34:05 2025 GMT
        Subject: CN=6949c75d-df2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:24:7a:6b:8f:f9:d3:1d:61:ce:da:55:2c:
                    17:f3:c4:5e:3a:6c:fd:36:dd:d2:d7:8a:44:85:e3:
                    29:99:31:ed:43:46:a9:e3:b4:4f:26:bc:16:a4:1d:
                    6e:db:0f:dc:2e:36:5e:60:2b:e4:ad:b4:5e:45:3a:
                    d7:ae:60:33:54:f8:bc:39:de:0d:4a:a1:90:ab:07:
                    61:6c:54:56:95:34:be:d0:72:9c:3b:12:06:58:99:
                    7b:61:5b:bf:03:02:68:77:04:55:dd:3a:cc:6b:cd:
                    9e:48:65:02:26:29:89:4b:d0:05:5a:a4:89:a4:68:
                    ef:16:2e:17:96:4a:59:43:56:52:6d:c8:44:0a:e9:
                    c5:ea:27:28:02:9c:1a:b0:3f:6f:92:43:9c:07:e7:
                    9c:b3:61:c6:9e:87:36:4d:fe:f0:78:3d:be:85:9c:
                    6e:d8:ec:65:82:90:c5:47:ad:4a:b7:aa:b3:08:c0:
                    6b:04:42:9d:c6:0d:f1:a6:4a:54:20:64:a2:d9:b4:
                    b9:d2:5b:98:a7:22:8e:01:4e:5f:f9:00:78:9a:b9:
                    6f:5f:b5:64:3d:cd:17:98:dc:70:a4:24:99:69:e8:
                    51:d5:05:68:65:a3:a5:dc:55:0e:05:9c:08:90:01:
                    5f:18:e2:06:b5:72:ff:f3:84:f4:8b:d3:12:29:1f:
                    66:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7E:5B:00:63:EF:BB:45:15:99:23:B0:B8:94:16:D9:A8:8B:D3:2B
            X509v3 Authority Key Identifier:
                keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:91:6b:9a:6e:ad:6d:26:42:1d:f5:92:4e:74:8b:ea:4a:c0:
         39:51:ac:4d:20:0f:43:31:e1:c1:ae:94:29:d2:7c:79:ae:55:
         6e:04:8d:d1:46:00:3d:7b:8c:a6:47:e3:3f:0d:22:93:e0:40:
         71:40:76:e8:55:7c:77:b5:ba:85:1b:27:da:cf:04:63:54:d1:
         06:b2:a1:c1:f9:1a:7d:bd:c8:e9:fe:3b:9a:5c:74:ad:f2:35:
         3e:a1:30:42:1e:5f:13:24:a1:93:f3:3a:1b:65:33:53:ac:ff:
         0a:01:ab:81:07:97:74:fe:97:33:27:a4:dd:4f:95:43:17:75:
         4b:bb:72:3b:1d:c5:13:30:52:de:98:88:c4:49:67:d8:b7:67:
         7b:49:de:ba:4d:40:44:87:3d:30:1e:65:21:d7:88:b7:66:67:
         66:bc:ef:51:05:36:87:b3:9a:7c:68:ed:80:78:54:62:38:e9:
         b8:86:89:4e:79:73:a2:e0:70:47:7d:f3:8f:c3:2c:d7:c2:45:
         89:16:1d:11:cc:c3:ad:01:e0:1e:e5:3d:cf:1d:bc:dc:72:90:
         46:1b:d8:55:aa:12:a4:c3:6a:5b:6a:74:c8:5d:c8:6a:b8:cf:
         b8:9c:54:47:2f:18:21:29:20:9e:de:b6:fb:30:f6:fd:0e:f0:
         6a:68:e3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:37:34 2025 by rpki-client